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(57) ABSTRACT 

Provided is a method and.mechanism~r^automaJic updating 
of computer progr-aifisand synchronising updates^qf com- 
puter programs^and their pre-requisite programs to maintain 
interoperability. Conventionally, computer programs hav 
been distributed on a recording medium for users to instal 
on their computer systems. Each time fixes, additions and 
new Versions for the programs were developed, a new CD or 
diskette was required to be delivered to users to enable them 
to install the update. More recently some software has been 
downloadable across a network, but the effort for users 
obtaining and installing updates and the effort for software 
vendors to distribute updates remains undesirable. The 
invention provides an updater agent which is associated with 
a! computer program and which accesses relevant network 
locations and automatically downloads and installs any 
available updates to its associated program if those updates 
satisfy predefined update criteria of the updater agent. The 
upiiater agents are able to communicate with each other and 
(date process include the updater agent of a first 
corflfluter program determining whether pre-requisite pro 
gramsi^mire updating to maintain interoperability and then 
requestinf^updates to-the first program's pre-requisites^ pro- 
grams whenr^Sired. 
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METHOD AND A MECHANISM FOR access to access the vendors' Web sites to manually check 

SYNCHRONIZED UPDATING OF lists °f tne latest available versions of products and then to 

INTEROPERATING SOFTWARE orQ, er the products on-line. This reduces the amount of 

paperwork involved io ordering software (and is equally 

FIELD OF INVENTION 5 applicable to other products). Some companies have also 

m ... . . , . - enabled their software to be downloaded directly from a 

The present invention relates to synchronised updating of Web ^ on a server ^mputcT to the customer's own 

mteroperating computer programs to maintain intcroperabil- computer (although this download capability is often 

ity when the programs are updated. restricted to bug fixing patches, low cost programs, and 

BACKGROUND io demonstration or evaluation copies of programs, for security 

reasons and because applying patches tends not to require 
Software has conventionally been distributed in the form any change to pre-requisite software or any data migration), 
of programs recorded on a recording medium such as a Information about the World Wide Web can be found in 
diskette or compact disk. Customers buy the recording "Spinning the Web" by Andrew Ford (International Thorn- 
medium and a licence to use the software recorded on the S on Publishing, London 1995) and 'The World Wide Web 
medium, and then install the software onto their computers 1 Unleashed" by John December and Neil Randall (SAMS 
from the recording medium. The manufacture and distribu- Publishing, Indianapolis 1994). Use of the WWW is grow- 
tion of the pre-recorded recording media are expensive, and ing at an explosive rate because of its combination of 
this cost will be passed on to the customer. Also, the effort flexibility, portability and ease-of-use, coupled with inter- 
for customers of ordering or shopping for the software is ^ active multimedia presentation capabilities. The WWW 
undesirable. allows any computer connected to the Internet and having 
Ihe distribution cost is particularly problematic because the appropriate software and hardware configuration to 
most software products are frequently updated, both to retrieve any document that has been made available any- 
correct bugs and to add new features, after the software has where on the Internet. 

been delivered to the user. Some types of software products ^ This increasing usage of the Internet for ordering and 

are updated many times each year. The cost of sending a new distribution of software has saved costs for software 

diskette or CD to all registered customers every time the vendors, but for many software products the vendor cannot 

software is upgraded or corrected is prohibitive and, just rely on all customers to access his Web pages at 

although many customers want their software to be the most appropriate times and so additional update mechanisms are 

up-to-date, highest performance version and to be error free, 3Q desirable. 

not all customers want to receive every update. For example, As well as the problem of manufacture and distribution 

the vendor may charge more for updates than the customer cost associated with distributing media, there is the problem 

wants to spend, or new versions may require upgrading of that customers typically need to make considerable proac- 

other pre-requisite software products which the customer tive effort to find out whether they have the best and the 

does not want to buy, or migrating to new versions may 3S latest version and release of a software product and to obtain 

require migration of data which would disable the custom- ^ ap pi y updates. Although this effort is reduced when 

er's system for a period of time. Internet connections are available, even a requirement for 

Thus, software vendors tend to publicise the availability proactive checking of Web sites is undesirable to many users 

of new versions of their software and leave it for the since it involves setting up reminders to carry out checks, 

customer to decide whether to purchase the latest upgraded 40 finding and accessing a software provider's Web site, navi- 

version. For some software products, however, it is appro- gating to the Web page on which latest software versions and 

priate for the software vendor to proactively send out patches are listed, and comparing version and release num- 

upgraded versions, or at least error correction and enhance- bers within this list with the installed software to determine 

ment code (known as "patches") for their software products. whether a relevant product update is available and to decide 

Whatever a particular company's policy, significant costs 45 whether it should be ordered. There may be an annoying 

and effort are involved in releasing these various types of delay between ordering an update and it being available for 

software updates. use, and even if the update can be downloaded immediately 

Increasingly, software distributors are using the Internet the task of migrating to an upgraded version of a software 

as a mechanism for publicising the availability of updates to product can be difBcult. If these steps have to be repeated for 

their software, and even for distributing some software. The 50 everv application, control panel, extension, utility, and sys- 

Internet is a network of computer networks having no single tern software program installed on the system then updating 

owner or controller and including large and small, public becomes very tedious and time consuming. Therefore, 

and private networks, and in which any connected computer manual updating tends not to be performed thoroughly or 

running Internet Protocol software is, subject to security regularly. 

controls, capable of exchanging information with any other 55 There is the related problem that software vendors do not 
computer which is also connected to the Internet. This know what version of their software is being used by each 
composite collection of networks which have agreed to customer. Even if the latest version of their software has 
connect to one another relies on no single transmission been diligently distributed to every registered customer (by 
medium (for example, bidirectional communication can sending out CDs or by server- con trolled on-line 
occur via satellite links, fiber-optic trunk lines, telephone so distribution), there is still no guarantee that the customer has 
lines, cable television wires and local radio links). taken the trouble to correctly install the update. This takes 
Hie World Wide Web Internet service (hereafter 'the away some of the freedom of software developers since they 
Web') is a wide area information retrieval facility which generally have to maintain backward compatibility with 
provides access to an enormous quantity of network- previous versions of their software or to make other con- 
accessible information and which can provide low cost 65 cessions for users who do not upgrade, 
communications between Internet-connected computers. It It is known in a client-server computing environment for 
is known for software vendors* customers who have Internet a system-administrator at the server end to impose new 
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versions of software products on end users at client systems administrator to set and test configuration models and to 

at the administrator's discretion. However, this has only install update resources at the server. 

been possible where the administrator has access control for SUMMARY OF INVENTION 

updating the client's system. This takes no account of users 

who do not want upgrades to be imposed on them. 5 According to a first aspect of the invention there is 

Yet a further related problem is that software products provided anupdater component and a method, implemented 

often require other software products to enable them to b X updater component installed on a computer system 

work. For example, application programs are typically writ- connected within a computer network, for synchronising 

ten to interoperate with a specific operating system. Since updates to computer programs installed on the computer 

specific versions of one product often require specific ver- " system, the method comprising: 

sions of other products, upgrading a first product without in response to initiation of an update of a first one of said 
upgrading others can result in the first product not working. installed computer programs, the updater component access- 
"Insider Updates 2.0" is a commercially available soft- m * list of said first computer program's pre-requisite 
ware updater utility from Insider Software Corporation computer programs, comparing the listed pre-requisite com- 
wbich, when triggered by the user, creates an inventory of 15 P uter programs with computer programs installed on the 
installed software on a user's Apple Macintosh computer computer system, and determining positively or negatively 
and compares this with a database of available software whether performing the requested update of the first corn- 
update patches (but not upgraded product versions) and P* er P™gram requires updating of pre-requisite computer 
downloads relevant updates. "Insider Updates" shifts the programs; and 

responsibility for finding relevant updates from the user to 20 if the determination is positive, the updater component 
the database maintainer, but the access to update patches is initiating an update of said pre-requisite computer programs, 
limited to a connection to an individual database and the Controlling synchronisation of updates of computer pro- 
tasks of scanning the Internet and on-line services to find grams and their pre-requisite programs by means of an 
updates and of maintaining the database of available updates updater component installed on the local system represents 
require significant proactive effort. "Insider Updates" does 25 an improvement over prior art methods which implement 
not install the updates or modify the user's software in any server-controlled distribution of updates since a greater 
way. "Insider Updates" does not address the problem of degree of automation and client control is achievable. With 
unsynchronised pre-requisite software products. known server-controlled distribution, synchronisation of 

A similar product which scans selected volumes of a updates is only possible with manual setting of configuration 

computer system to determine the installed software and models which define desired desktop configurations (as well 

which connects to a database of software titles for the Apple as installation and testing of update software at a distribution 

Macintosh, but does not download updates, is Symmetry server), followed by server-controlled distribution. The pre- 

Software Corporation's "Version Master 1.5". definition and maintenance of desired state desktop configu- 

An alternative update approach is provided by "Shaman 3S rations represents a significant overhead. 
Update Server 1.1.6" from Shaman Corporation, which With P resenl invention, updating of computer pro- 
consists of: a CD-ROM (updated and distributed monthly) g rams ™ d meir pre-requisite programs can be initiated and 
that users install on a PowerMac file server; client software controlled by a locaUy-installed updater component which 
for each Macintosh computer to be inventoried and updated; accesses a list of the pre-requisite products for each 
and means for accessing an FTP site storing a library of ^ enhanced version of the programs. Initiation of an update 
current updates. "Shaman Update Server" creates an inven- may be in response to a timer expiry for periodic update 
tory of networked computers and downloads and distributes attempts, or may be part of the computer system's boot-up 
latest versions of software to each computer. Network procedure, or may be at other times as defined by an update 
administrators centrally control this inventory and updating policy for the system. 

process. The distribution of CD-ROMs has the expense 45 According to a second aspect of the invention, there is 

problems described earlier. provided a method of updating computer programs and an 

Marimba Inc's software product "Castanet UpdateNow" u P dater component for use in updating computer programs 

« implements a combination of transmission of updates to ^stalled on a computer system connected within a computer 

client systems and support for the development of client network, the updater component including: 

applications following the instructions of administrator 5 o means for initiating access to a first set of identifiable 

defined update command files to achieve either centralised network locations at which are provided identifications of 

or user controlled update management. Castanet Update- software resources required for applying updates to at least 

Now does not provide for synchronized updating of col- a first computer program and identifications of any computer 

laborative software products. programs which are prerequisites for the operation of said 

Novadigm Inc's "Enterprise Desktop Manager"™ (EDM) 55 first computer program when updated; 

provides for desktop software packages to be updated by means for comparing the identified software resources 

means of an 'actual state' model and a 'desired state' model, and identified pre-requisite computer programs with com- 

which are admimstrator-created definitions of existing and P^ter programs installed on said computer system, to iden- 

desired desktop configurations. These object models are "fy computer programs to be updated; 

placed on a server computer and the server, at some pre- 60 means for mitiating access to a second set of identifiable 

defined time, communicates with client computer systems locations within the network (which may be the same 

and compares their actual state model and desired state locations as the first set, and either 'set' may be a single 

model. The differences are translated into a list of required location) at which are provided said identified software 

resources (software components, configuration files, etc) resources, to retrieve said identified software resources for 

which are then downloaded and installed on the client 65 applying updates; 

system. EDM provides a centralised resource management means for triggering updating of said pre-requisite com- 

which relies on server control and manual effort by an puter programs; and 
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means for applying updates to said installed computer update. This feature of executing dynamically downloaded 

programs using the retrieved software resources. instructions provides flexibility in relation to the types of 

The triggering of updating of pre-requisite computer updates that can be handled by an updater component It can 

programs is preferably implemented by the updater compo- also be used to enable a single generic updater component to 

nent of a first computer program cornmunicating an update * be used with many different software products, 

requirement to an updater component of the identified Alternatively, the installation instructions for certain soft- 

pre-requisite computer program. According to a preferred warc updates may be pre-coded within the updater compo- 

embodiment of the invention, updater components register nent. The "software resources" are typically a combination 

themselves with a repository within the computer system of program code, machine readable installation instructions 

when the updater components are installed, and installation i° and any required data changes such as address information, 

of updater components is preferably an integral part of A system according to the invention preferably retrieves 

installation of the updater component* s associated computer update resources for implementing an update of an installed 

program. Since the updater components for all installed computer program by sending an update request to one or 

computer programs register with the repository, each more computer systems at network locations at which the 

updater component is identifiable and contactable by other 15 required software resources are provided (together with a list 

updater components by reference to registration information of update resources and pre-requisites). The information 

in the repository. used to identify the network locations may be explicit 

Adistinct advantage of the present invention over server- network location information held by the updater 

controlled update mechanisms which rely on administrator component, or it may be a software vendor name or any 

defined system configurations is that the present invention 20 other information which can be used as a search parameter 

has the flexibility to automatically deal with any depth of for identifying the location. In the preferred embodiment, 

inter-dependency in the relationship between pre-requisite the information is a product identifier which is provided by 

products. That is, updating a first program may require the updater component to a network search engine to lmtiate 

updating of a second, which may require updating of a third, a search to identify the relevant network location at which 

and this can be implemented by updater components com- 25 are stored software resources for implementing an update to 

municating their update requirements to each other and that product. This search may be performed by a conven- 

consequent triggering of updates without any input from the tional Internet (or other network) search engine which is 

administrator or user called by the updater component When the search engine 

Furthermore, the invention according to the preferred „ TMuy^^tam^^loe^i^u^ 

embodiment deals with cyclic dependencies (such as where 30 component re neves from this location a tat of available 

afirstproductAatversiona-lreiiiresproductBatversion rel ( f vant u P d f s ; <*"*» ** . Lst ^ d 

2.1, and B at 2.1 also requires Aat 2.1) Indeed, the method P"" 1 ** verslon Predefined update 

of the present invention according to the preferred embodi- cntena > ^ ] etn %'* the u ? da . te reMurce fi s ° nt0 local 

ment imposes no constraint over the topology of the update system if those critena are satisfied, 

sequence of mutually dependent interoperating products. According to a preferred embodiment of the invention, a 

An updater component according to a preferred embodi- standardised naming convention is used for software 
ment of the invention thus controls upgrading of, and fixing resources which to build software updates, and the 
of bugs within, an associated software product or products component can search for these resources on a 
automatically without requiring any interaction by the user «, Network Sv f m ^yst*m Tins allows software 
after an initial agreement of update criteria. The update »*!»"»» to be stored at multiple locations to mitigate 
criteria can be associated with the products' licensing terms netwo * availability problems and makes it easier for 
and conditions. This ensures that users who adopt a suitable developers and distributors to provide their error-fixing 
update policy can always have the most up-to-date software P a "* es and u Pf raded versions of »*»«» P™ 1 ? 0 *- For 
available, with errors being corrected automatically from the 45 "J"**. a devdoper can make new software updates avail- 
viewpoint of the user. The user does not need to know where fble via i a public network dak drive on their LAN using a 
software updates come from, how to obtain them or how to known filename or via a published Uniform Resource Loca- 
install them since the update component takes care of this. tor (URL) which can be searched for using known key 
The software vendor avoids having to ship special CDs or words. 

diskettes to correct errors or provide additional features; the 50 Updater components are preferably an integral part of the 

vendor can easily release code on an incremental basis such products they will serve to update. Hence, the updater 

that customers receive new product features sooner and with component is distributed to software users together with an 

no effort. initial version of a software product, the updater component 

An updater component according to a preferred embodi- thal automatically obtaining and applying software updates 

ment of the invention performs a comparison between ss m accordance with preset criteria (such as a time period 

available software updates and installed software on the between successive searches for updates and whether the 

local computer system to identify which are relevant to the particular user has selected to receive all updates or only 

installed software, compares the available relevant updates u P dates »«* as to rcceive "pdatmg patches but not 

with update criteria held on the local computer system (these replacement product versions for example), 

update criteria are predefined for the current system or so The updater component's update capability preferably 

system user), and then automatically downloads and applies includes updating itself. Indeed, the update criteria may be 

software updates which satisfy the predefined criteria. set such that the updater component always accesses appro- 

This automatic applying of software updates preferably priate network locations to obtain updates to itself before it 

involves installing available software patches and/or searches for software resources for updating its associated 

upgraded versions in accordance with both the predefined 65 software products. 

update criteria and instructions for installation which are An updater component according to the invention pref- 

downloaded together with the program code required for the erably includes means for checking whether prerequisite 
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products are available, and are synchronised to the required obtain or activate it. The installation of each updater corn- 
version, as part of the process of selecting an update path for ponent includes the updater component registering itself 
the current product. In a preferred embodiment, as well as with the operating system or another repository 40 on the 
checking their availability, the updater component is capable local computer system. Thus, at least the updater compo- 
of instructing the updater components associated with pre- 5 nents on the local system are identifiable and contactable by 
requisite software products to initiate updates to their soft- address information, and/or their product identifier, within 
ware where mis is the agreed update policy. If each software the register entry. In alternative embodiments of the 
product's updater component is capable of triggering invention, the repository 40 may be a central or distributed 
updates to pre-requisite products, then updates can ripple repository for the network, as will be discussed below, 
through the set of installed software products without the 10 It is a feature of the preferred embodiment of the inven- 
user having to be involved in or aware of the updates. This tion that each updater component can locate, can be located 
capability is a significant advantage over prior art updater by, and can communicate with other updater components 
agents which do not deal with the problem of unsynchro- which manage other software products. This capability is 
nised software versions when one updates, and supports the used when one updater component requires another one to 
increasing desire within the software industry for collabo- 15 update to a specific level before the former can execute its 
ration between distributed objects to perform tasks for the own update, as will be discussed below. This is enabled by 
end user. the updater components registering within the operating 

The updater component preferably also includes a mecha- system or other repository 40. 
nism for verifying the authenticity of downloaded software, In the preferred embodiment, each registration entry con- 
using cryptographic algorithms. This avoids the need for 20 tains two items: the updater path and the updater network 
dedicated, password-protected or otherwise protected soft- address. The path is the location of the updater component 
ware resource repository sites. The software resources can binary file so that the updater component can be launched by 
be anywhere on the network as long as they are correctly the operating system during the boot up process. This 
named and or posted to the network search engines. ensures that the updater component is always active and 

Thus, the present ^invention provides an agent and a 25 ready to perform work or handle requests issued to it from 

method for synchronising software updates which signifi- other updater components. The network address is the 

cantly reduces the cost and effort for software distributors of address used by components on other computer systems in 

distributing and tracking software updates and significantly the network to locate it on the network and to communicate 

reduces the effort for system administrators and end users of with it. 

applying updates to installed software. 30 An example of such registration using a UNIX (TM) 

operating system and the TCP/IP protocol suite uses the 

BRIEF DESCRIPTION OF DRAWINGS following naming convention for updater components: 

Tne present invention will now be described in more SoftwareVendorName + _product_ J iame + _updater. 

detail, by way of example only, with reference to the 35 Path registrations can be entered in the UNIX/etc/inittab 

accompanying drawings in which: file to store the P ath eDtrv - ™**> for example, the updater 

™« A . * . » . r . , component for IBM Corporation's DB2 (TM) database 

FIG. 1 is a schematic representation of a computer net- j F , . . , « , .„ *, , t , t . \ u «i 

i • 1 j. , , * . • * 11 j product is installed it will add an entry to the /etc/inittab file 

work including a local computer system having an installed r £ 4 . - J 

■t . * I , • ? t c -i of the form: 
updater component, server computers storing lists of avail- 
able Updates and Storing software resources for applying 40 ibm_db2pe_updatex:2icspawa:/usr/abin/db2_updater_binary 

updates, and a search engine for locating the servers; Every ^ me compil ter system reboots it will read this 

FIG. 2 is an example of a software vendor's list of their file and launch the DB2 updater component. The "respawn" 
software versions and the resources and prerequisites for keyword in the updater entry ensures that, should the updater 
building from one version to another; component process fail for some reason during general 

FIG. 3 represents the sequence of operations of an updater 45 system operation, it will be restarted by the operating system 
component according to an embodiment of the invention; automatically. This approach will ensure that all updater 
and components for all installed applications are always active. 

FIGS. 4A and 4B are further representations of the Network Location registrations can be entered in the 
sequence of operations of an updater component. 50 UNIX/etc/services file. For example when the DB2 updater 

component is installed it will add an entry to the /etc/services 
DETAILED DESCRIPTION OF PREFERRED file of the form: 

EMBODIMENTS ibm_db2pe_updntcr 5000/tcp #nct location of DB2 updater com- 

As shown in FIG. 1, an updater component 20 is installed pcmftnl 
in system memory of a conventional network-connected ss When another updater component wishes to communicate 
computer system 10, together with an associated computer with the DB2 updater component it will find it by searching 
program 30. The updater component may have been deliv- this /etc/services file for the DB2 updater component name 
ered to the user of the local computer system on a storage ib_db2pe_updater (actually done indirectly by the UNIX 
medium (diskette or CD) for him to install, or it may have call getservbynameO— the name is built by the caller 
been explicitly downloaded from another computer system. 60 according to the standard naming convention). When it is 
In preferred embodiments of the invention, updater compo- found it knows that the DB2 updater is listening for con- 
cents are integrated within the computer program they are nections on port number 5000 and will use the TCP protocol, 
intended to maintain (or are otherwise delivered via the This allows the updater component in question to establish 
same mechanism and at the same time as their associated a Link to the DB2 updater component and start a conversa- 
program). The updater component is then installed as part of 65 tion (described later). 

the installation procedure of its associated program, such For an updater component to find and talk to another 

that the user is not required to take any special action to updater component on another remote machine the above 
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information would have to be augmented by having a for modifying an existing program (e.g. for error correction) 

repository 40' which is accessible from both machines and the patch's installation instructions, 

(preferably a central or distributed database accessible from For the current example, we will assume that the network 

anywhere in the network, such as a Web Page or pan- 100 is the Internet, although the invention may be imple- 

network file) and is available to all updater components that 5 mented within an Intranet or any computer network. Also 

require it. Entries would be of the form updater_name shown within the network 100 is a server system 80 on 

machine_ip_address (OR DNS entry), port number, pro- which a search engine 90 is installed for use in finding 

tocol. update source locations on the network. This is shown 

For example, the manufacturing department of an organi- located remotely from the local system 10, although it need 

sation may have three computer systems on which distrib- 10 not be. In the Figure, each updater component 20 is shown 

uted software products collaborate with each other, the associated with a single program 30, and it is a feature of this 

systems being called a, b and c. Typical entries in the web embodiment of the invention that all installed software 

page or file manufacturing_coUaborators.html might be: products have associated updater components which man- 
age them, but neither of these features is essential to the 

ibnx_catia_updater a. ma nuiacturing.com 5000 tcp 15 invention as will be explained later. 

The operation of an updater component will now be 

1 bm_db2 P e_updat £r b.nWactomg.com 5100 tcp described, with reference to FIGS. 3 and 4. When an 

ibm_cics_updat« cmaiiufacturing.com 4780 tcp installed updater component executes, in response to 

completion of a cycle period or in response to a request from 

An updater component can then connect and talk to any 20 another software product's updater component, its first 

other updater component using the DNS name to create an action is to initiate 200 a search for available updates to the 

IP address and the port number which the remote updater particular software product. It provides to one or more 

component is listening to at that address. search engines 90 search arguments comprising the product 

The steps of updater registration at installation are there- identifier and product version release number obtained by 

fore: 25 the updater component at install time. Software vendors 

1) Create entry in /etc/inittab file (register updater process wishing to benefit from the services of the updater compo- 
code location) nent provide via their Web sites a list 60 of available product 

2) Create entry in /etc/services file (register updater updates referenced by product identifier and release number 
process local address) 110 (or some other consistent naming convention is used). 

3) Create entry in central database file (register updater 30 The search identifies the relevant Web site 140 on which the 
process pan-network address). update information is available. A URL identifying the 

The installation process may also involve providing to the relevant Web site 140 for update information is returned 210 

updater component the local IP address of a Web proxy to the updater component as a result of the search. If the 

server. It will be clear to persons skilled in the art that many initial attempt to start a search engine is unsuccessful, then 

alternative registration implementations are possible. 35 the updater component will attempt to start a different search 

Updater components include data fields for an identifier engine (which may be in a different geographical location to 

and version number for their associated software products. the first), but in alternative embodiments could wait for a 

The updater components may be delivered to customers with preset time period and then retry. 

these fields set to null values, and then the installation The updater component uses the URL to access 220 the 

procedure includes an initial step of the updater component 40 list 60 and downloads 230 a file 160 comprising the portion 

interrogating its software product to obtain an identifier and of the list 60 of available updates which relates to the 

current program version and release number. Alternatively, particular product. The updater component then performs 

the software vendor may pre-code the relevant product ID steps 240-280 as shown in FIG. 4. Each file 160 contains 

and version number into the updater component. message digests (e.g. MD5) which are digitally signed. The 

The system 10 of FIG. 1 is shown connected within a 45 retrieved file 160 is then analyzed 240 using a digital 

network 100 of computers including a number of remote signature checking algorithm (such as the algorithm 

server systems (50,50') from which software resources are described in U.S. Pat. No. 5,231,668). This verifies that the 

available for applying updates to programs installed on the file 160 represents the correct software updates list for the 

local system 10. Each server system includes within storage particular software product, and that the file has not been 

a list 60 of the latest versions of, and patches for, software 50 tampered with since signing. Also, checking for the digital 

products which are available from that server. Each vendor signature is a useful way of filtering the results of the search 

is assumed here to make available via their Web sites such since these may include a plurality of Web page URLs other 

a list 60 of software updates (an example of which is shown than the correct one (the search may find other pages which 

in FIG. 2) comprising their product release history, in a have a reference to the named product version, including 

format which is readable by updater components, and to 55 pages not published by the software vendor). If an attempt 

make available the software resources 70 required to build to download and verify a file is not successful, then the 

the releases from a given level to a new level (this transition updater component moves on to the next URL found in the 

from a software product release to a new level will be search. 

referred to hereafter as a 'growth 1 path). The entries in the The updater component then performs on the local corn- 
software updates list 60 include for each software product 60 puter system a comparison 250 between the current installed 
version 110 an identification 120 of the software resources software product's identifier and release number and the 
required for applying the update and an identification 130 of listed available updates in the retrieved file 160. This corn- 
its prerequisite software products and their version numbers. parison determines possible growth paths from the current to 
In some cases, the required resources are complete replace- updated versions, but these possible growth paths are then 
ment versions of software and associated installation 65 compared 260 with predefined update criteria, and any 
instructions, and deletion instructions for the software being possible paths which do not satisfy the update criteria are 
replaced. In other cases, the resources comprise patch code discarded. Thus, the updater component determines whether 
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it is possible to migrate from a current software product to The search engine returns 330 one or more URLs and the 
the available new versions and whether it is possible to apply updater component uses these to retrieve 340,350 the soft- 
patches to the current version under the currently agreed ware resources into storage of the local computer system. At 
licence terms and conditions. this stage, the updater component or the user need not have 
For example, the software product licence may enable 5 any knowledge of what corrections or enhancements may be 
migration to any future version of the product and applica- included in the new version — the update criteria determine 
tion of any available patches, or only migration up to a what type of updates are required such that the user is spared 
specified version, or it may only permit applying of available the effort of studying the content of every update. Id 
patches which modify or correct errors in the current ver- practice, it is desirable for users to be able to determine the 
sion. Possible update paths which are unavailable due to 10 effects of updates and so the software resources for the 
current license limitations are notified 270 as a system update include a description of these effects which a user or 
generated message sent to the software asset manager (who administrator can read. 

may be an end user or IT procurement manager) of the As examples, the software product to be updated may be 

currently installed version, to enable them to make decisions a word processor application program. If the word processor 

about whether the current licence is adequate. 15 as sold missed certain fonts or did not include a thesaurus, 

As well as licence restrictions as to the updates that are patches may subsequently be made available for adding 

possible, an updater component's update criteria or growth these features. The updater component has the capability to 

policy includes a cycle period (for example weekly or add these to the word processor, subject to the update 

monthly) and criteria for determining which of a plurality of criteria. 

possible growth paths to select (such as always select latest 20 In alternative embodiments of the invention, the search 

version permitted by licence, or always select latest patch for required software resources is unnecessary following the 

and only notify availability of new versions, or only select initial search for the updates list (or is only necessary where 

new versions if prerequisite software is already available on there are pre-requisite software products as well as patches 

local system). The growth criteria may also include control or new versions for the current product - see below). This is 

information such as when to upgrade to new versions that 25 because the update software resources required directly by 

are downloaded by the updater component— if data migra- the current product are stored in association with the list of 

tion is required when migrating to a new software product required resources. That is, the list includes a pointer to the 

version it may be essential for this to be done outside of network location of the required resources such that a 

office hours or only at a single scheduled time each month selection of a growth path from the list involves a selection 

or each year and this can be controlled by the updater 30 of a pointer to the network location of the required updates 

component. (and possibly also pointers to the locations of pre-requisite 

The growth policy definition may also include a param- software products), 
eter determining that updating of pre-requisite software A second verification by digital signature checking is 
products should be requested when required to maintain performed 360 (see FIG. 4), this time on the downloaded 
synchronisation with the current product. This will be 35 resources. After verifying 360 the legitimacy of the down- 
described in more detail below. Persons skilled in the art will loaded resources, the updater component automatically 
appreciate that there is great flexibility in the criteria that can builds 310 the installation in the target environment in 
be set and applied by the updater component. accordance with the update policy. In practice, this may 

The updater component then decides 280 on a particular require information from the user such as an administration 

growth path (i.e. which available version to upgrade to) from 40 password, or a database usage parameter value, but in the 

the set of possible growth paths using the update criteria. For preferred embodiment of the invention installing of the 

example, the updater component may select the highest downloaded code is automatic in the sense that it does not 

possible version or release number of the available updates require the user to know or obtain from elsewhere any 

which is permitted by the update criteria, if that is the update installation information and in that it generally enables the 

policy. 45 user to be freed from makmg any dedsions at nm tune if the 

The updater component performs 290 (see FIGS. 3 and 4) predefined update criteria enable the updater component to 

a scan of the operating system file system to check whether automatically apply updates. 

the required software resources are already available on the It is well known to include machine readable installation 

local computer system. The required resources are the instructions encoded in a shell (for example as Script, or an 

software update artifacts required to bring the current appli- 50 interpretive language such as PERL, or an executable such 

cation software to the new level, and the software updates as setup.exe in the case of applications on Microsoft's 

required for updating prerequisite software to required lev- Windows (TM) operating system). Updater components 

els. Each updater component associated with pre-requisite according to the invention will download 350 the machine 

installed products is contacted 300 to ensure (a) that it is readable instructions together with the relevant software 

installed on the local system, and (b) that it is at or greater 55 resources and will automatically execute them 310. The 

than the version level required for interoperability. If all updater component thus automatically processes installation 

required resources are available locally (or on another instructions, avoiding the input from a person which is 

machine in the case of software relying on some pre- conventionally required. The Scripts can be adapted to reuse 

requisite software operating on a remote machine), and have information gleaned from the first human installer who 

been verified, then the updater component progresses to the 60 installed the first version of the updater component (for 

step 310 (see FIG. 4) of building the updated software example, information such as user name and password of 

version. If not, the update component must obtain the application administrator, installation directory, etc), 

required resources. Th e method of updating according to the preferred 
As shown in FIGS. 3 and 4, if required software resources embodiment of the invention requires software vendors to 
for building the updated version are not found on the local 65 organise the software resources required to build from one 
system, the updater component submits 320 a further request product level to another. For example, a move from version 

to one or more search engines to find the required resources. 1.1.1 to 1.1.4 would typically include a series of patches to 
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be applied, and the required order of installation if any 
would advantageously be encoded in machine processable 
installation instructions. Hie user is then spared the effort 
and the risk of human error which are inherent in methods 
which require the user to control the order of application of 
fixes and enhancements. The problem of how to migrate 
from one product level to another is thus dealt with by the 
software vendor instead of the customer, and updater com- 
ponents can only move to levels supported by the vendor 
(i.e. those growth paths published by the software vendor for 
a specific existing product level). 

The updater generates 380 a report and writes 390 to log 
records, and then quits execution 400 (in the preferred 
embodiment the updater goes into a sleep or idle state) until 
activated again 410 upon expiry of a predetermined update 
cycle period (the repeat period parameter is configured when 
the updater component is installed). 
Structure of updater component 

The structure of an updater component comprises data, 
methods for operating on that data, and a public application 
programming interface (API) which allows other updater 
components to contact and communicate with it. This struc- 
ture will now be described in detail. 
UPDATER COMPONENT DATA: 

The updater component includes the following persistent 
data: 

Product_JD: an identifier of the software product which 
is managed by this updater component 

Current_JnstaUed__Version: 
a version identifier for the installed software (e.g. version 
3.1.0) 

Current_License a version identifier corresponding to the 
software product version up to which the current software 
license allows the user to upgrade (e.g. version 4.0.z) 
.Alternatively, this may be a licence identifier (e.g. LIC1) for 
use when accessing machine readable licence terms. 

Installation__Bnvironment: 

a list of attribute name/attribute value pairs. 

This is used by the updater component to store values 
entered by the user when the updater was used for the first 
time. For example, the updater installation userid and 
password, possibly the root password, the installation 
directory, the web-proxy server address, search engine 
URLs, log file name, software asset manager e-mail address 
etc. This data will be re-used when subsequent automatic 
updates are required. 

Growth policy parameters: 

a. Growth__Cycle: data determining whether the updater 
component should attempt to update its software product 
every day, week or month, etc. 

b. Growthjiype: data determining whether the updating 
is limited to bug fixing and enhancements (i.e. patches) only 
or requires upgrading to the latest release in each growth 
cycle. 

c. Force_Growth: (YES/NO) a parameter determining 
whether to force other software resources to upgrade if that 
is a pre-requisite for this software to upgrade. (Some imple- 
mentations will provide more flexible controls over forcing 
other software to update than this simple YES/NO) 

Last_Growth_Time: Date and time when updater com- 
ponent last executed. 

The updater component also includes the following non- 
persistent data: 

Possible_Growth_Paths: transient data representing the 
available upgrade paths (e.g. version numbers 3.1. d, 3.2.e, 
4.0.a) 

Update_Thread: string containing the update thread 
information. It has the following structure: 
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<Product _Jd #l,version #l><Product_Jd #2, version#2> 
. . . <Product_id #n-l,version#n-l><Product_id 
#n,version#n> 

The thread information lists the products (i.e. Product_Jd 

5 #x) which are participating in the synchronisation transac- 
tion on this component and the versions they are attempting 
to grow to (i.e. version#y). It represents a thread of forced 
updates originating from component 1 (or root component) 
which is attempting to update unilaterally through compo- 

10 nent 2 which is being forced to update by component 1 and 
component 3 which is being forced to update by component 
2 and so on to the n" 1 component being forced by the n-1** 
component. It is the n rt component in this Update thread 
which is forcing this component to update to a specific level. 

15 This string is empty if this is the first component attempting 
to update unilaterally (i.e. it is not being forced to update). 
This information is assembled to guard against cyclic depen- 
dencies in between products. See the "example of update 
synchronisation" section to find out how it is used to 

20 accomplish this. 

PRIVATE UPDATER FUNCTIONS: 

The updater component logic includes the following 
methods: 

25 Discover_Possible_Growth„PathsO 

Search for Growth_Path information for this software 
product on the Internet (or Intranet or other network). This 
search method initiates a search via a standard search engine 

30 server. The information returned is a list of newer versions 
and associated pre-requisite product information. 

The Growth_Path information is then reduced in accor- 
dance with the Growth policy parameters. For all members 
in the Growthjaths list, a check is performed of whether 

35 appropriate versions of pre-requisite products are available 
on the local and/or remote computer. The updater compo- 
nents managing these pre-requisite products are accessed 
and forced to grow if this is the policy. 
If all pre-requisite products exist locally at the correct 

40 level, or are available remotely on the network and there is 
with a "force growth" policy, then identifiers for newer 
versions of the software product are added to the Possible_ 
Growth_JPaths list. 
Avoiding cyclic update dependencies: 

45 If one of the pre-requisite software components is found 
in the Update_Threads string with a version which complies 
with the required version level then it is deleted from the 
pre-requisite list to ensure that a force update is not 
attempted on it. 

so If the prerequisite software is in the Update_thread list 
but with an insufficient version number then this is not a 
valid growth path. The final chosen growth path will have all 
pre-requisite software components elements which are 
either already available locally or already specified in the 

55 current Update-Thread or can be forced to update to the 
required version via an in place force update policy. 
Decide_Growth_PathO 

Interpret the growth policy and select a single growth 
gQ path. Some implementations of the invention will involve 
user interaction to select the path, for example if there are 
considerations such as whether to force updates to other 
programs. 

Get_Resources(Parameter: Chose n_Growth_J?ath) 
65 Given Chosen_Growth_Path (e.g.3.2.0), search for 
required resources (Parameters Product_ID, Current_ 
Installed_Version, Cnosen_Growth_JPath), download all 
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resources to local computer. This will include software The automatic handling of the potential problem of 

required for the new version phis machine processable unsyochronised pre-requisite products by enabling forcing 

installation instructions. of updates (or, if forcing of updates is not part of the update 

InstalLJlesourcesO policy, sending of notifications to the software asset 

Process installadoD instructions including installing 5 "2™« Br > " * *** nce °™ P ri °< * u P date 

required files in correct locations, possibly compilation of s emcs * 

the files and modifying the configuration of the existing since *e updates ^ file 160 returned to the updater 

system to accommodate the software, logging all actions to component in response to an initial search includes an 

a file (and enabling an "uninstall" method to undo all identification 130 of pre-requisite software, that information 

actions) 10 ena °L es me aforementioned examination 290 of the updater 



GrowQ 



component registration database 40,40* to check whether 
pre-requisite software is available locally or remotely. If it 
Initiates methods: finds ^ ttie up d a ter components located locally or remotely, 

Discover Jossible_Growth__Paths() it can be sure that the software pre-requisites are available 

//uses Update_Thread information to avoid update 15 and it next needs to contact each updater component for each 
//dependency cycles if no possible growth paths exist then software product to be sure all pre-requisites are at the 
updater component becomes idle co™ 6 * level - If 311 updater component 20* having a required 

1^ product identifier for pre-requisite software 30' but not 

having the required version number is found locally or 
Decide__Growth_Path() 20 remotely, and if forcing of updates is the update policy, then 

Get_Resources(Parameter: Cbosen_Growth_Path) the updater component 20 of the first computer program 

Install_ResourcesO* contacts 300 this pre-requisite updater component 20 1 and 

Then Grow() writes all completed actions to log and requests that it attempt to update its associated pre-requisite 
finishes execution of the updater component. The updater software product 30'. This updater component 20' can, if 
component becomes idle either until time to check again for 25 necessary, request other updater components of its pre- 
new update requirements or until prompted by another requisite software to update their versions, and so on. 
updater component to do so. If at some stage no relevant updater component is found 

locally or remotely, then a message is sent to the asset 
PUBLIC UPDATER COMPONENT API: manager to inform him/her of the requirement for a new 

m , . «. 30 product in order to grow the associated product further. If at 

A J hC J? pdat l r com P° Dent ]T l u dtS ^ e ul followin S P ubhc some stage during the chain of updater requests to grow to 
API. These functions would be callable using existing a new leyel Qne datef onent fails to move to the 

network communications software such as remote proce- re ^ ^ ^ ^ failure fa rted back to its caUi 

dure calls message oriented middleware, ORB (Object updatef prom pti n g fai iure of that component's 

request broker), etc. 35 up( j ate operation, and so on back to the updater component 

Get_J*elease() which initiated the whole transaction. 

This function is called by other updater components and Thus, as well as their autonomous behaviour defined by 

returns the release level of the product managed by this their update criteria, updater components can react to exter- 

updater component nal stimuli such as requests from other updater components. 

Update(update_thread,new level) Example of update synchronisation 

Other updater components call this function to move the An example of the implementation of update synchroni- 
product managed by this updater component to a new level sation between two products will now be described. This 
indicated by the new_level parameter value. The update_ example shows how one updater component can communi- 
thread parameter is a string containing the update thread 45 cate with another to synchronise pre-requisite software so 
information. It is of the form <product_Id, that all products are present and at compatible release levels. 
version><product_Id,version>. . . The thread information A CORBA (Common Object Request Broker 
lists the products (i.e. Product_Id #x) which are participat- Architecture) ORB (Object Request Broker) is used for 
ing in the synchronisation transaction and the versions they location of and communication between two updater corn- 
are attempting to grow to (Le. version#y). When a software 50 ponents. Using the above public API it is a simple matter for 
component calls this function on another software compo- those familiar with the art of CORBA programming to 
nent it must append its own Product_Jd and version to its develop communication code so that one updater component 
copy of the string before passing it as a parameter (This can talk to another updater component anywhere on a 
string will only contain one Product_id and version if the network. In this example the component updater registration 
calling component is the root component or first component 5S database 40 is a directory or folder available over the 
in the update task). This will call the private function network (e.g. via NFS) which contains for each installed 
GrowO- updater component a file called "updater__component_ 

Receive_Jlvent(event details) nameiop" (iop stands for interoperable object reference). 

When an updater component receives a request to update, This file contains a sequence of bytes which can be 

it must inform the calling updater component when it has so converted into a reference to the updater component by any 

completed the update or otherwise e.g. if it failed for some updater component which reads the file using for example 

reason. The updater component performing the update on the CORBA function: 

behalf of another updater component will call this function CORBA; :Object::_string_to_object() in C++ 

of the requesting updater component to communicate sue- Furthermore this reference can be to an updater compo- 

cess of the update or otherwise. Event details can be a string 65 nent anywhere on the network as it represents a unique 

like "product id, new release level, ok" or "product id, new address for the corresponding updater component When 

release level, failure' 1 . updater component A has manufactured a reference to 
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updater component B then updater component A can call a Step 4) 

public API function simply by using, for example, a C++ Client Side: 

mapping A-»Get_J*elease() which will then return the The QB Updater Component knows that this is not 

value of the release level of the software managed by the A sufficient , it requires version 2.1. It examines its Force_ 

updater component. 5 Growth parameter which is, for example, "YES" meaning it 

In this example we will consider two products— IBM should force pre-requisite software to grow to the level 

Corporation's DB2 database product and a Query Tool required before it can perform its own update procedure, 

called "Query Builder", on different machines M and N Therefore the QB updater tells the DB2 updater to grow to 

respectively. (Machines M and N could be the same the new release, and then waits until the pre-requisite has 

machine; the present example merely shows that they may 10 grown to the new release or failed in doing so. 

also be separate). Both products have updater components [pseudocode] 

which use a CORBA ORB architecture as briefly outlined dbref-^Update("QB,2.0", a 2.r, QBref); 

above. An ORB communication daemon is active on par- //the first parameter is the update thread parameter, so far 

ticipating systems M and N. only //one product is participating in the update chain, 

Step 1) Registration phase: 15 i.e. Query //Builder which is attempting to grow to 

The DB2 Updater Component starts when the operating version 2.1. The DB2 //updater component will use this 

system starts on system M and immediately creates a file information in this parameter to //avoid the problem of 

called ibm_db2_updater.iop (according to some naming update cycles. See server side for how this 

standard used to aid subsequent searches for the file) in the //information is processed. QBref is a ready made 

network file system folder or directory. This directory could 20 reference to the //QB Updater. It is passed to the DB2 

be hosted on any machine and not necessarily M or N. The updater so that it can //quickly send the results, success 

file contains a series of bytes which can be used to mami- or failure, when the DB2 //Updater has finished trying 

facture a reference to the updater component. to update itself, 

[pseudocode] EVENT-null; 

Filehandle- 25 While (EVENT equals null) 

open ("/network/filesystem/directory", "ibm_db2_ {do nothing;} 

updateriop if (EVENT equals "SUCCESS") 

"); then attempt to grow software managed by this 

ReferenceBytes- CORBA: :Object::„object_to_string0; updater component i.e. Query Builder. 

Write(FileHandle, ReferenceBytes); 30 else 

close (Filehandle); Write failure to log; 

QueryBuilder Updater component starts and writes its do not attempt to grow; 

registration to the same directory or folder, again in this case go to sleep and try later; 

calling the file ibm__querybuilder_jupdater.iop. endif. 

At this stage both updater components are active and have 35 Server Side: 

registered their presence and location in the network direc- The DB2 Updater component receives the request to 

tory. grow. Which it attempts to do. 

Step 2). It reports the result to the calling client (it knows how to 

QueryBuilder attempts to grow from version 1 to version contact the calling client as it is receives a reference to the 

2 but a prerequisite is DB2 version 2.1 or higher. The 40 caller in the function call.) 

following sequence of actions will occur. QueryBuilder is [pseudocode] 

denoted QB and DB2 as DB2. DB2 updater component Update_Thread is set to equal 

QB: searches for file ibm_db2_updater.iop (file name update_thread passed to it via the update call. i.e. 

manufactured according to standard) in network directory. It Update_Thread«"QB,2.0" 

finds the file, reads it and converts it to a usable reference. 45 //see private grow function for details on how this 

[pseudocode] Update_Thread 

if (dbref= //information is processed. 

CORBA: :Object::_string__to_object(readfile(ibm_db2__ DB2 attempts to grow. 

updater .iop))) if Growth Successful then 

then SUCCESS we have connected to the updater 50 QBRef-»Receive_Event ("SUCCESS"); // Note the 

else implementation of the // function Receive_Jivent simply 

FAIL: Prerequisite software does not exist in set of sets the variable // called EVENT in the QB Updater 

collaborating systems — send e-mail to software asset man- component to the // value of the parameter passed in the API 

ager to notify situation. call , i.e. // "SUCCESS" if in this section of the IF statement. 

Give up on trying to grow to new version. 55 else 

endif. QBREF— Receive_Event ("FAILURE"); 

Step 3). end if 

At this stage we know that DB2 exists somewhere in our As noted previously, predefined update criteria may deter- 

set of networked computers. Now we need to know if it is mine which of an available set of updates should be applied 

at the right level. We simply do this by executing its public 60 and which should be disregarded. The update criteria may 

API function Get_Release() defined above, from within the include an instruction to the updater component to send a 

QB updater, the QB updater is therefore a client requesting notification to the end user or system administrator when a 

the DB2 updater to do something for it, i.e. tell it what software update is identified as being available but applying 

release it is. this update is not within the update policy or is impossible, 

[pseudocode] 65 One of the examples given previously is that the update 

db2_release«dbref-»Get^Release(); policy may be not to install full replacement versions of 

Let us say this returns the value "2.0". software products since that may require upgrading of 
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pre-requisite software products or migration of data (for l.O.b 

example if the software product is a database product), ««END: Discover possible_Growth_Paths() 

whereas it may be intended policy to install any error- Step 2) Next the updater component decides on the Growth 

correction patches. Notification rather than automatic instal- Path to pursue: 

lation of updates may also be implemented where to upgrade 5 »»START Decide Growth_Path() 

one product to a new version would require upgrading of * The growth policy dictates that we should grow to latest 

other pre-requisite complementary products. patched revision. (In this example, determining the latest 

Hie update policy can also determine the degree of revision is trivial i.e. it is l.O.b) 

automation of the updating process, by defining the circum- * chosen growth_path=1.0.b 

stances in which the updater requests input from the user or 10 (NOTE: For all pre-requisites which are not already in 

administrator. place at the required revision level, an update is forced on 

The execution of a particular example updater component their associated updater agents to make them migrate to the 

will now be described in more detail by way of example. required level. Note that, because items in the Update_ 

This updater component's function is to keep an installed Thread are considered to already exist, no software compo- 

product called "Test" totally up-to-date with all released 15 nent which is already on the Update„Thread is forced to 

patches, but not to install replacement versions of Test. update — thus preventing cyclic dependencies between 

Firstly, the updater component is configured with the fol- products.) 

lowing data instantiations: ««END: Decide_Growth__Path() 

Product_JD: Test Step 3) The updater component then obtains the required 

Current_Installed Version: l.O.a 20 resources to revise the current software level to the new one. 

Current_License: LIC1 »»Get_ResourcesO 

InstallationJnvironment:"USERID:TestOwner, USER- * Execute search on remote search engine (e.g. Internet 

PASSWORD:easy" Search Engine) using Phrase ("IBM Test REVISION 1 .0.a to 

"INSTALLPATH: /usr/bin/testapp/" l.O.b 

Growth_Cycle: weekly 25 RESOURCES"). 

Growth_Type: patches, latest, automatically * Search returns URL say 

Force_Growth: no f^>://ftp.vendor-site/pub/test/resources/1.0.a-b M 

Last_Growth_Time: Monday Aug. 10, 1997. * Updater downloads file pointed to by URL and places 

The updater then executes weekly, for example each in secure holding area where it verifies authenticity. 

Monday night at 3 am (it is the system administrator who 30 * Updater verifies authenticity (using, for example, digital 

decides the timing). signatures based on RSA algorithm, or any method) 

The following represents a possible execution trace for If files not authentic, then return to search (see Note 1 

this example updater component. below) 

Example execution trace * Updater unpacks resources into a temporary directory 

Step 1) The growth cycle starts: 35 (see Note 2 below). These resources include machine pro- 

»»START: Discover_possible_Growth _Paths0 cessible installation instructions (for example, instructions 

* Execute search on remote search engine (e.g. Internet written in a script language such as a UNIX shell script or 
Search MVS REXX) and files (either binary or requiring 

Engine) using Phrase ("IBM Test l.O.a Growth Paths") compilation) which actually contain 

Search returns URL published by software vendor out- 40 the software fix. 

lining current growth paths for product; ««END: Get_J*esources0 

* Download URL: Notes on above tasks 

File contents are Note 1 — To save time the updater looks for a standard file 

"1.0.b,none; 2.0, other__required product_j3roduct_id before downloading the URL called "signature", which 

l.O.c;" 45 contains the URL. 

* Authenticate URL file using hashing algorithm and ftp://ftp.vendor-site/pub/test/resources/1.0.a-b and a list- 
digital signature. ing of its contents. This is hashed and signed. Using this 

If not authentic, return to search for another URL match- signature, the Updater component can quickly establish 

ing criteria authenticity of the URL (to some extent) before download- 

* Build growth__path_Jist:growth path list«"1.0.b,none; 50 ing it and use the information i.e. file listings to corroborate 
2.0,other_required_product__jd l.O.c;" the final downloaded resources after they have been 

* Remove all but patch level increases (according to unpacked into the temporary directory. When the final URL 
Growth__Policy) from Growth_path list (i.e. only those is downloaded it is also checked again for authenticity (to 
with the first version and second release number matching guard against someone placing a bogus artefact in an authen- 
1.0). 55 tic URL location). 

* growth_4)ath list="1.0.b,none;" Note 2— Part of the unpacking is that the updater com- 

* For all members in list, ensure prerequisites exist. In this ponent will examine the installation scripts and modify them 
example, all members of list meet this criteria trivially. based on the contents of its installation environment data 

(Note: If this was a forced update then the Update_ where required. For example if the installation instructions 

Thread would be examined to see if any pre-requisite 60 were coded in a shell script it will replace all instances of 

component for any path existed already in the Update_ INSTALLPATH with the token "/usr/bin/testapp/". Again 

Thread, if it does and at a level greater than or equal to the Naming conventions of attributes are standardised as it the 

level required by the growth path then that prerequisite is method of token substitution in installation instructions, 

assumed to exist (as will be in place once the update This makes totally automatic installation possible, 

transaction is complete).) 65 Step 4) Trie updater component then implements the 

* Place candidate growth_paths into Possible_Growth_ actual software upgrade: 

Paths list= »»START InstalLJtesourcesO 
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* execute the installation instructions. 

* update the values of 
Current_Jnstalled_Version«l .0 .b 
Last_Growth_Time-D ate+Ume , 

* s end an e-mm 'l tff nnftwarft fl«jffit manager informing o f 
installatio n and wh ether or not a reboot of the Opera ting 
System or restart oi tne application is required before the 
upgra de laxes anect. "~ " " 

*««tiiNLi insiaii Resource s0 

T his is the end of this current growth cycle. The see d 
updates the Last_Growth_Time value the current time an d 
t hen exits. The tim e taken for this cycle could be anythin g 
f rom a few seconds wnere the updatef component fo und no 
upgrade p aths for the currently installed versi on to several 
hoTra rtfTTotally new release from tne current one is~to~be 
d ownloaded and installed together with new pre-requisi te 
sof tware. 

alternative to the embodiment described abo ve in 
det ail does not require an independent update r component 
t or every dilterent software product, but ' uses a^sjpg]g ^ 
generic upd ater component i nstalled o n a system t ogether 
with pro duct-specific p lug-ig_ ob jects a nd instructions which 
a re downloaded wit h eac h product. The se objects interop - 
e Yate with the generic code to provide the^am eJuaciions.of 
the product-specific updater components describjE^ahov^ lt- ^ 
will be clear t o persons sKUied in the^art Jhat-the*present 
Invention couia be implemented within systems in which 
some but not all application programs and other software 
products installed on the system have associated updater 
components, and that other changes to the above-described 
embodiment are possible wjth^-ti^ -fiGQp^-Qf the present 
invention. — ■ 
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hat is claimed is: 

1. A method, implemented by an updater component 
installed on a computer system connected within a computer 
network, for synchronising updates to computer programs 
installed on the computer system, the method comprising: 

in response to initiation of an update for a first on of said 
initiating access to a fist of said first computer pro- 
gram's pre-requisite computer programs, wherein the 
step of initiating access to a list of pre-requisites 
includes the step of the updater component providing to 
a network search engine a search parameter for iden- 
tifying one or more network locations at which are 
provided a list of software resources required for apply- 
ing updates and a list of pre-requisite computer 
programs, comparing the listed pre-requisite computer 
programs with computer programs installed on the 
computer system, and determining positively or nega- 
tively whether performing the requested update of the 
first computer program requires updating of pre- 
requisite computer programs; and 

if the determination is positive, the updater component 
initiating an update of said pre-requisite computer 
programs. 

2. A method according to claim 1, wherein the updater 
component initiates the update for the first installed com- 
puter program in accordance with predefined update criteria. 

3. A method according to claim 2, wherein the updater 
component initiates update attempts periodically according 
to a set cycle period for the computer programs. 

4. A method according to claim 1, including the steps of: 
the updater component initiating access to one or more 

network locations at which are provided the software 
resources required for applying an update; 
downloading the required software resources from said 
one or more locations onto the computer system; and 
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using the retrieved software resources and the first com- 
puter program to generate a new version of the first 
computer program. 

5. A method according to claim 1, wherein the step of 
determining whether updating of pre-requisite computer 
programs is required includes comparing said listed prereq- 
uisite computer programs with predefined update criteria 
stored on said computer system. 

6. A method according to claim 1, including registering 
updater components with a repository, wherein the step of 
initiating an update of pre-requisite computer programs 
comprises the updater component of the first computer 
program communicating an update request to registered 
updater components of the pre-requisite computer programs. 

7. A method according to claim 6, including the following 
steps implemented by an updater component in response to 
an update request from another updater component: 

initiating access to a list of the updater component's 
respective computer program's pre-requisite computer 
programs, 

comparing the listed pre-requisite computer programs 
with computer programs installed on the computer 
system, 

determining positively or negatively whether performing 
the requested update of the updater component's 
respective computer program requires updating of pre- 
requisite computer programs; and 

if the determination is positive, initiating an update of said 
pre-requisite computer programs. 

8. An updater component for installation on a computer 
system connected within a computer network, for synchro- 
nising updates to computer programs installed on the com- 
puter system, the updater component including: 

means responsive to initiation of an update for a first one 
of said installed computer programs for initiating 
access to a fist of said first computer program's pre- 
requisite computer programs, wherein the means for 
initiating access to a list of pre-requisites includes 
means for providing to a network search engine a 
search parameter for identifying one or more network 
locations at which are provided a list of software 
resources required for applying updates and a list of 
pre-requisite computer programs; 

means for comparing the listed pre-requisite computer 
programs with computer programs installed on the 
computer system and determine positively or nega- 
tively whether performing the requested update of the 
first computer program requires updating of pre- 
requisite computer programs if the determination is 
positive. , 

9. Acomputer system including an updater component for 
synchronising updates to computer programs installed on the 
computer system, the updater component including: 

means responsive to initiation of an update for a first one 
of said installed computer programs for initiating 
access to a list of said first computer program's pre- 
requisite computer programs, wherein the means for 
initiating access to a list of pre-requisites includes 
means for providing to a network search engine a 
search parameter for identifying one or more network 
locations at which are provided a list of software 
resources required for applying updates and a list of 
pre-requisite computer programs; 

means for comparing the listed pre-requisite computer 
programs with computer programs installed on the 
computer system and deterrnining positively or nega- 
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tively whether performing the requested update of the 
first computer program requires updating of pre- 
requisite computer programs; and 
means for initiating an update of said prerequisite com- 
puter programs if the determination is positive. 

10. An updater component for use in updating computer 
programs installed on a computer system connected within 
a computer network, the updater component including: 

means for initiating access to a first set of identifiable 
network locations at which are provided identifications 
of software resources required for applying updates to 
at least a first computer program and identifications of 
any computer programs which are prerequisites for the 
operation of said updated first computer program; 

means for comparing the identified software resources 
and identified pre-requisite computer programs with 
computer programs installed on said computer system, 
to identify computer programs to be updated; 

means for initiating access to a second set of identifiable 
locations within the network at which are provided said 
identified software resources, to retrieve said identified 
software resources for applying updates; 

means for triggering updating of said pre-requisite com- 
puter programs; and 

means for applying updates to said installed computer 
programs using the retrieved software resources. 

11. An updater component according to claim 10, wherein 
said means for triggering updating of pre-requisite computer 
programs comprises means for communicating an update 
requirement to an updater component associated with the 
identified pre-requisite computer program. 

12. An updater component according to claim 11, adapted 
to register itself with a repository within the computer 
system with which the updater components for other 
installed computer programs are also registrable, thereby 
enabling updater components to be identifiable and con- 
tactable by other updater components by reference to reg- 
istration information in the repository. 

13. An updater component according to claim 10, wherein 
said means for comparing identified software resources with 
installed computer programs for identifying computer pro- 
grams to be updated is adapted to compare said provided 
software resources with said installed computer programs 
and with predefined update criteria stored on said computer 45 
system. 

14. An updater component according to claim 10, wherein 
said identifiable locations are identifiable from product 
identification information within said installed computer 
programs or within said updater component, the updater 
component being adapted to provide said product identifier 
information to a search engine and the product identifier 
information serving as a search parameter for use by said 
search engine to identify network locations. 
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15. An updater component according to claim 10, wherein 
said identifiable locations are identifiable from network 
location information within said installed computer pro- 
grams or within said updater component. 

16. A computer system connected within a computer 
network and including an updater component for use in 
updating computer programs installed on the computer 
system, the system including: 

means for initiating access to a first set of identifiable 
locations within the network at which are provided 
identifications of software resources required for apply- 
ing updates to at least a first computer program and 
identifications of any computer programs which are 
pre-requisites for the operation of said updated first 
computer program; 

means for comparing the identified software resources 
and identified pre-requisite computer programs with 
computer programs installed on said computer system, 
to identify computer programs to be updated; 

means for initiating access to a second set of identifiable 
locations within the network at which are provided said 
identified software resources, to retrieve said identified 
software resources for applying updates; 

means for triggering updating of said pre-requisite com- 
puter programs; and 

means for applying updates to said one or more installed 
computer, programs using the retrieved software 
resources. 

17. A method for updating computer programs installed 
on a computer system connected within a computer network, 
the method including: 

initiating access to a first set of identifiable network 
locations at which are provided identifications of soft- 
ware resources required for applying updates to at least 
a first computer program and identifications of any 
computer programs which are pre-requisites for the 
operation of said updated first computer program; 

comparing the identified software resources and identified 
pre-requisite computer programs with computer pro- 
grams installed on said computer system, to identify 
computer programs to be updated; 

initiating access to a second set of identifiable locations 
within the network at which are provided said identified 
software resources, 

retrieving said identified software resources for applying 
updates; 

triggering updating of said pre-requisite computer pro- 
grams; and 

applying updates to said first installed computer program 
using the retrieved software resources. 
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